2e4a5d8270f3db5c31fcb864e9fdf079_JaffaCakes118 | Triage

Sharing

General

Target

2e4a5d8270f3db5c31fcb864e9fdf079_JaffaCakes118
Size

41KB
MD5

2e4a5d8270f3db5c31fcb864e9fdf079
SHA1

e7cb7a85ca2c2debb2145e7cdc26a9d7e17f3f2a
SHA256

16796c547064789db0720534a929f7e996c53c0cc055cf2ed424d894f260842e
SHA512

07f2ccf6e4b93afc5c82a04973ce2be8311a96a4f0cd3c35a8c4f840852716f3a995693747efd85c00ec16f400399690c4e511d5d9132f3298af95fce54e63c6
SSDEEP

768:pF47xgsIojKkbsseBFQflBzSzXa7Aoe788laOwoaW9lcn5ZjuzuW43JXc1E:pF4F9beOB7AovfW9K5Z+J43lc1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e4a5d8270f3db5c31fcb864e9fdf079_JaffaCakes118

Files

2e4a5d8270f3db5c31fcb864e9fdf079_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b73cda72d2f5cb6bccc46f6ee7d366f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE